palmier 1.1.23 → 1.1.25

package/DISCLAIMER.md

@@ -10,7 +10,7 @@ Palmier spawns third-party AI agent CLIs (such as Claude Code, Codex CLI, GitHub
 - **Execute arbitrary shell commands** with your user permissions
 - **Make network requests** and interact with external services
 
-AI agents may produce unexpected, incorrect, or harmful outputs. **You are solely responsible for reviewing and approving all actions taken by AI agents on your system.** The authors of Palmier have no control over the behavior of third-party AI agents and accept no liability for their actions.
+AI agents may produce unexpected, incorrect, or harmful outputs. **You are solely responsible for all actions taken by AI agents on your system, including actions taken without per-action approval.** The authors of Palmier have no control over the behavior of third-party AI agents and accept no liability for their actions.
 
 ## Agent CLI Installation
 
@@ -20,10 +20,12 @@ Agent CLIs that Palmier installed (those carrying a Palmier-managed version stam
 
 ## Unattended and Scheduled Execution
 
+Palmier runs agents with tool approvals bypassed whenever the agent CLI supports it. Agents can act without asking first.
+
 Tasks can be configured to run on schedules (cron) or in response to events without active supervision. You should:
 
 - Use the **confirmation** feature for sensitive tasks
-- Restrict **permissions** granted to agents to the minimum necessary
+- Limit what the **host's user account** can access, for example by using a dedicated account, container or VM
 - Regularly review **task history and results**
 - Maintain **backups** of any important data in directories where agents operate
 

package/README.md

@@ -53,7 +53,6 @@ Every task Palmier runs gets these capabilities automatically. Their usage is wr
 | Capability | Description |
 |------------|-------------|
 | `notify` | Send a push notification to the user's device |
-| `request-input` | Request input from the user (blocks until response; aborting the prompt aborts the task) |
 | `request-choice` | Ask the user a question with a fixed set of options and return the one picked; a single option serves as a confirmation (blocks until response; aborting aborts the task) |
 | `fill-password` | Fill a saved password or PIN into the active browser session and submit the form, prompting the user if unknown (the secret is never revealed to the agent) |
 | `device-geolocation` | Get GPS location of the user's mobile device |
@@ -75,6 +74,12 @@ Every task Palmier runs gets these capabilities automatically. Their usage is wr
 
 All device tools work while the Palmier Android app is in the background — they communicate via FCM data messages which wake the app's service even when it's not in the foreground. Each host has one **linked device**: the phone the host uses for SMS, contacts, location, and other device capabilities. Choose it at pair time (the "Link the host to this device" checkbox) or later from the drawer. Each capability must be enabled and its Android permission granted via toggles in the linked device's drawer.
 
+### Asking the User
+
+When an agent needs an answer it can't get from a fixed list, it writes its question as its final message and ends with the `[PALMIER_TASK_NEED_INPUT]` marker. The agent CLI then exits and the run moves to a "needs input" state, with a push notification that opens the run. The user answers in the run view's message box, or aborts from there.
+
+`palmier run` stays alive during the wait, so anything the agent left running, such as its browser, stays open. Palmier polls for the reply and resumes the same agent session with it, repeating until the agent reports success or failure. An unanswered question fails the run after 24 hours. The reply is handed over through a file in the run directory, so a daemon restart doesn't lose the wait.
+
 ### Files in Agent Output
 
 Agents run with the task's run directory (`~/palmier/tasks/<task-id>/<run-id>/`) as their working directory and are instructed to link any file they produce with a relative markdown link, e.g. `[View report](report.md)` or `![Chart](chart.png)`. The app opens these links over whichever transport is in use (local, relay, or auto-LAN). It fetches the file through the `task.file` RPC in 512 KiB chunks, so large files fit within the relay's message size. Markdown files render in-app, with their own relative links and images resolved from the file's location. Text and images are previewed, and other file types are offered as a browser download. The host only serves files whose real path (after resolving symlinks) is inside that task's directory, up to 25 MB. A run whose output links an existing file triggers a "report ready" push notification.

package/dist/agent-tools.js

@@ -41,63 +41,6 @@ const notifyTool = {
         throw new ToolError(result.error ?? "Push notification failed", 502);
     },
 };
-const requestInputTool = {
-    name: "request-input",
-    description: [
-        "Request input from the user.",
-        "The request blocks until the user responds.",
-        'Response: `{"values": ["answer1", "answer2"]}` on success, or `{"aborted": true}` if the user declines.',
-        "When you need information from the user (credentials, answers to questions, preferences, clarifications, etc.), do not guess, fail, or prompt via stdout, even in a non-interactive environment — use this instead.",
-    ],
-    inputSchema: {
-        type: "object",
-        properties: {
-            description: { type: "string", description: "Context or heading for the input request" },
-            questions: {
-                type: "array",
-                items: { type: "string" },
-                description: "Questions to present to the user",
-                minItems: 1,
-            },
-        },
-        required: ["questions"],
-    },
-    async handler(args, ctx) {
-        const { description, questions } = args;
-        if (!questions?.length)
-            throw new ToolError("questions is required", 400);
-        const pendingPromise = registerPending(ctx.taskId, "input", questions, {
-            session_id: ctx.taskId,
-            description,
-            input_questions: questions,
-        });
-        await ctx.publishEvent("_input", {
-            event_type: "input-request",
-            host_id: ctx.config.hostId,
-            session_id: ctx.taskId,
-            description,
-            input_questions: questions,
-        });
-        const response = await pendingPromise;
-        const aborted = response.length === 1 && response[0] === "aborted";
-        recordUserResponseToRun(ctx, aborted
-            ? "Aborted"
-            : questions.map((q, i) => `**${q}**\n\n${response[i] ?? ""}`).join("\n\n"));
-        if (aborted) {
-            await ctx.publishEvent("_input", {
-                event_type: "input-resolved", host_id: ctx.config.hostId,
-                session_id: ctx.taskId, status: "aborted",
-            });
-            await ctx.abortTask();
-            return { aborted: true };
-        }
-        await ctx.publishEvent("_input", {
-            event_type: "input-resolved", host_id: ctx.config.hostId,
-            session_id: ctx.taskId, status: "provided",
-        });
-        return { values: response };
-    },
-};
 /** Splice the user's answer into the run file so history shows it even if the agent never echoes it. */
 function recordUserResponseToRun(ctx, content) {
     const taskId = ctx.taskId;
@@ -166,7 +109,7 @@ const requestChoiceTool = {
         "Ask the user a question with a fixed set of answers and let them pick one.",
         "The request blocks until the user picks an option or aborts the task.",
         'Response: `{"choice": "<option>"}` with the selected option, or `{"aborted": true}` if the user aborts.',
-        "Use this instead of request-input whenever the possible answers are known in advance.",
+        "Use this whenever the possible answers are known in advance.",
         "An abort option that ends the task is always shown, so to ask for confirmation before continuing, pass a single option naming the action (e.g. [\"Send email\"]). Add a decline option only if declining should let the task continue differently.",
     ],
     inputSchema: {
@@ -269,7 +212,7 @@ const fillPasswordTool = {
                 event_type: "input-resolved", host_id: ctx.config.hostId,
                 session_id: ctx.taskId, status: aborted ? "aborted" : "provided",
             });
-            // Never record the secret to the task run file (unlike request-input).
+            // Never record the secret to the task run file.
             if (aborted) {
                 await ctx.abortTask();
                 return { aborted: true };
@@ -779,7 +722,7 @@ const sendEmailTool = {
         return result;
     },
 };
-export const agentTools = [notifyTool, requestInputTool, requestChoiceTool, fillPasswordTool, deviceGeolocationTool, readContactsTool, createContactTool, readCalendarTool, createCalendarEventTool, sendSmsTool, sendEmailTool, sendAlarmTool, readBatteryTool, setRingerModeTool];
+export const agentTools = [notifyTool, requestChoiceTool, fillPasswordTool, deviceGeolocationTool, readContactsTool, createContactTool, readCalendarTool, createCalendarEventTool, sendSmsTool, sendEmailTool, sendAlarmTool, readBatteryTool, setRingerModeTool];
 export const agentToolMap = new Map(agentTools.map((t) => [t.name, t]));
 const deviceNotificationsResource = {
     name: "Device Notifications",

package/dist/agents/agent-instructions.md

@@ -13,19 +13,21 @@ The user reads your output on a different device and can only open files you lin
 
 ## Completion
 
-When you are done, output exactly one of these markers as the very last line on stdout (no other text on the same line):
+When you stop, output exactly one of these markers as the very last line on stdout (no other text on the same line):
 [PALMIER_TASK_SUCCESS]
 [PALMIER_TASK_FAILURE]
+[PALMIER_TASK_NEED_INPUT]
 
 On the line right before that marker, in the same final message, print the model you are running as, using the exact model name or ID from your system prompt (skip this line if you do not know it rather than guessing):
 [PALMIER_AGENT_MODEL] <model>
 
 Do this at the end of every response, including responses to follow-up messages.
 
-## Permissions
+## Asking the User
 
-Whenever a tool you are trying to use is denied or you lack the required permissions, print each required permission on its own line to stdout using this exact format:
-[PALMIER_PERMISSION] <tool_name> | <description>
+When you need information from the user (answers to questions, preferences, clarifications, etc.), do not guess or fail. Write your questions in full as your final message, then end it with `[PALMIER_TASK_NEED_INPUT]`. Your process will exit, and the user's reply will arrive as the next message in this same session. Anything you left running, such as a browser, stays open, so leave it as it is.
+
+If the possible answers are known in advance, use the `request-choice` endpoint instead. For passwords and PINs, use `fill-password`.
 
 ## Browsers
 
@@ -33,7 +35,7 @@ Whenever the task needs a browser, launch it with the Playwright CLI (`playwrigh
 
 When launching, always pass `--headed` (never run headless) and `--persistent` (reuse a persistent profile so logins and cookies survive across runs).
 
-When the task is finished, close any browser you opened with the Playwright CLI `close` command (pass the same `-s=<session>` if you used one) before printing the completion marker.
+When the task has succeeded or failed, close any browser you opened with the Playwright CLI `close` command (pass the same `-s=<session>` if you used one) before printing the completion marker. Do not close it when you are stopping to ask the user for input.
 
 ## HTTP Endpoints
 

package/dist/agents/agent.d.ts

@@ -25,9 +25,6 @@ export interface AgentTool {
      *  can sign in before configuration continues. Leave undefined for agents that auth on
      *  first run with no separate command. */
     authArgs?: string[];
-    /** Whether this agent supports permission overrides (e.g. --allowedTools).
-     *  When falsy, the permissions section is omitted from agent instructions. */
-    supportsPermissions?: boolean;
     /** When true, the run loop persists the agent's stderr output only if the invocation fails. */
     suppressStdErr?: boolean;
     /** Matches the model name (capture group 1) in the banner the CLI prints on stderr.
@@ -51,7 +48,6 @@ export declare function getNpmInstalledVersion(npmPackage: string): string | nul
 export interface DetectedAgent {
     key: string;
     label: string;
-    supportsPermissions?: boolean;
     npmPackage?: string;
     /** Runtime marker for "managed by Palmier" — present iff Palmier installed/manages this agent. */
     version?: string;

package/dist/agents/agent.js

@@ -10,10 +10,8 @@ import { kimiAgent } from "./kimi.js";
 import { gooseAgent } from "./goose.js";
 import { openCodeAgent } from "./opencode.js";
 import { deepAgentsAgent } from "./deepagents.js";
-import { aiderAgent } from "./aider.js";
 import { cursorAgent } from "./cursor.js";
 import { kiroAgent } from "./kiro.js";
-import { clineAgent } from "./cline.js";
 import { qoderAgent } from "./qoder.js";
 import { hermesAgent } from "./hermes.js";
 import { grokAgent } from "./grok.js";
@@ -66,10 +64,8 @@ const agentRegistry = {
     goose: gooseAgent,
     opencode: openCodeAgent,
     deepagents: deepAgentsAgent,
-    aider: aiderAgent,
     cursor: cursorAgent,
     kiro: kiroAgent,
-    cline: clineAgent,
     openclaw: openClawAgent,
     hermes: hermesAgent,
 };
@@ -120,7 +116,6 @@ export async function detectAgents(previous, newlyInstalled) {
         detected.push({
             key,
             label: agent.label,
-            supportsPermissions: agent.supportsPermissions,
             ...(agent.npmPackage ? { npmPackage: agent.npmPackage } : {}),
             ...(version ? { version } : {}),
         });

package/dist/agents/claude.js

@@ -5,7 +5,6 @@ export const claudeAgent = {
     promptArgs: ["-p"],
     probeArg: "--version",
     authArgs: ["auth", "login"],
-    supportsPermissions: true,
     npmPackage: "@anthropic-ai/claude-code",
     freeUsage: "Free with Claude Pro",
     getTaskRunCommandLine(task, followupPrompt) {

package/dist/agents/shared-prompt.d.ts

@@ -2,5 +2,7 @@ import type { ParsedTask } from "../types.js";
 export declare function getAgentInstructions(task: ParsedTask): string;
 export declare const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export declare const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export declare const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";
+export declare const TASK_NEED_INPUT_MARKER = "[PALMIER_TASK_NEED_INPUT]";
 export declare const AGENT_MODEL_PREFIX = "[PALMIER_AGENT_MODEL]";
+/** A resumed session may have lost the original instructions to compaction, and a missing marker silently ends the run. */
+export declare function getResumePrompt(userMessage: string): string;

package/dist/agents/shared-prompt.js

@@ -10,10 +10,13 @@ export function getAgentInstructions(task) {
     const taskDescription = task.frontmatter.user_prompt;
     return AGENT_INSTRUCTIONS_TEMPLATE
         .replace(/\{\{ENDPOINT_DOCS\}\}/g, generateEndpointDocs(port, task.frontmatter.id))
-        .replace(/\{\{TASK_DESCRIPTION\}\}/g, taskDescription)
-        .replace(/## Permissions\r?\n[\s\S]*?(?=## |\r?\n---)/m, "");
+        .replace(/\{\{TASK_DESCRIPTION\}\}/g, taskDescription);
 }
 export const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";
-export const TASK_PERMISSION_PREFIX = "[PALMIER_PERMISSION]";
+export const TASK_NEED_INPUT_MARKER = "[PALMIER_TASK_NEED_INPUT]";
 export const AGENT_MODEL_PREFIX = "[PALMIER_AGENT_MODEL]";
+/** A resumed session may have lost the original instructions to compaction, and a missing marker silently ends the run. */
+export function getResumePrompt(userMessage) {
+    return `${userMessage}\n\n---\nEnd your response with exactly one of these as the very last line on stdout: ${TASK_SUCCESS_MARKER}, ${TASK_FAILURE_MARKER}, or ${TASK_NEED_INPUT_MARKER} if you need more from the user.`;
+}

package/dist/agents/wizard.js

@@ -60,7 +60,6 @@ export async function pickAndInstallAgent(current, options = {}) {
     const record = {
         key: choice.key,
         label: choice.label,
-        ...(tool.supportsPermissions ? { supportsPermissions: true } : {}),
         npmPackage: choice.npmPackage,
         ...(version ? { version } : {}),
     };

package/dist/commands/run.d.ts

@@ -1,12 +1,11 @@
 import type { AgentTool } from "../agents/agent.js";
-import type { TaskRunningState, RequiredPermission } from "../types.js";
+import type { TaskRunningState } from "../types.js";
 export declare function stripPalmierMarkers(output: string): string;
 export declare function runCommand(taskId: string): Promise<void>;
 /** Only links to files that exist count, so example links echoed from the prompt are ignored. */
 export declare function listLinkedTaskFiles(taskDir: string, runId: string, output: string): string[];
-export declare function parsePermissions(output: string): RequiredPermission[];
 export declare function parseAgentModel(output: string): string | undefined;
 /** Returns a function that accumulates stderr chunks and yields the model once the CLI banner reveals it. */
 export declare function createCliModelCapture(agent: AgentTool): (stderrChunk: string) => string | undefined;
-/** Falls back to "finished" if no success/failure marker is found. */
+/** Falls back to "finished" if no outcome marker is found. */
 export declare function parseTaskOutcome(output: string): TaskRunningState;